$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86f2ecd8-57a6-3c18-bc13-77125411e74a.roa File: 86f2ecd8-57a6-3c18-bc13-77125411e74a.roa (raw, json) Hash identifier: xQSPoul+WFXHJ+KGEbGELZOR4LHABk9dIF1tGk34Nkg= Subject key identifier: 9F:7F:C0:8C:9B:7B:00:93:4D:66:33:7B:78:EA:FF:C8:F9:7B:29:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F3737471CF8B53F17E72C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86f2ecd8-57a6-3c18-bc13-77125411e74a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 396982 IP address blocks: 104.154.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:37:47:1c:f8:b5:3f:17:e7:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=f9aa3cae-270c-40a1-b141-60f291745a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:3d:e4:e0:3f:aa:80:5d:f9:26:c0:b2:9c: bf:1f:01:71:50:2c:47:15:37:b3:29:9a:00:b4:d4: 13:e8:73:54:52:69:b2:1b:88:19:61:9d:ba:74:91: 7b:c4:01:a0:9c:c8:7c:97:0f:9e:6a:99:21:0a:85: 35:df:35:68:81:8b:ae:53:45:48:fd:35:72:69:61: cc:7a:e3:e9:c1:4f:3f:9d:82:c5:21:c6:03:04:26: 5a:eb:69:10:59:46:25:50:9d:5b:d0:7f:24:2a:6f: 51:01:3f:f4:d1:e6:2a:56:3d:7a:76:5f:f2:46:2a: 19:d5:dc:2f:10:ff:f5:c3:ec:4a:93:14:61:6d:84: 58:34:fc:9e:95:a8:0b:de:6c:08:ec:fc:06:c9:4a: 2c:36:3a:07:19:fd:41:58:40:94:0b:7d:09:75:cc: 2e:42:bd:9d:1b:72:54:88:b6:db:9b:50:9e:c3:45: ee:87:26:6a:4e:13:ec:d8:52:1b:5a:76:6c:f6:02: 77:fb:6a:24:84:ed:3d:e2:f0:fa:63:97:4a:41:bf: 0c:61:37:b3:b8:83:13:46:32:25:24:81:5a:9a:98: 4d:88:3e:e1:07:cf:4e:35:43:b2:65:25:30:2f:1a: e1:65:10:3c:6b:5b:18:f6:2b:3b:6b:9b:4a:26:4d: 00:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7F:C0:8C:9B:7B:00:93:4D:66:33:7B:78:EA:FF:C8:F9:7B:29:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86f2ecd8-57a6-3c18-bc13-77125411e74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9e:b7:7a:b9:c9:5b:be:a1:22:ef:9a:c7:66:a1:bd:2b:9b: 86:c7:b5:8a:a3:da:03:ed:85:ee:c7:79:84:be:9b:db:6d:00: 80:46:03:c6:7d:3d:93:f0:d9:1c:ea:43:12:45:8e:7c:3c:9b: eb:b5:fe:b0:c7:8b:f2:e3:b0:3e:05:c3:4e:20:11:e3:17:e2: e5:10:1e:42:fa:c3:9c:2e:76:56:b4:01:4f:1e:b0:4d:4d:44: e8:40:6f:d1:f3:ba:78:fc:59:a3:ad:bb:79:50:01:f8:cb:b4: 11:6b:bd:be:11:10:3d:b2:7a:76:59:44:2d:e7:4d:a3:29:b3: 7b:30:d0:ca:cf:7c:55:ce:e7:d3:83:fc:55:44:40:9e:86:68: b7:4d:49:8c:93:f2:fb:73:94:ea:ef:b7:e8:69:66:73:22:38: 3d:cc:db:ce:7c:22:e3:db:58:91:84:8f:9b:77:74:a3:03:b9: 81:47:45:20:ec:86:08:cf:bc:48:a0:56:3f:b9:6c:19:3a:01: 42:ae:c5:ba:36:88:81:e1:90:3e:d4:41:78:7a:d9:c5:21:73: 7e:a9:d7:67:35:f3:09:6b:91:7c:94:39:22:45:f0:b8:3b:4c: 82:28:2c:bf:28:d4:87:8e:5f:1d:63:cf:d9:06:31:b4:94:cb: 82:aa:e8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzdHHPi1PxfnLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjlhYTNjYWUtMjcwYy00MGExLWIxNDEtNjBmMjkxNzQ1YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE895OA/qoBd+SbAspy/HwFxUCxHFTezKZoA tNQT6HNUUmmyG4gZYZ26dJF7xAGgnMh8lw+eapkhCoU13zVogYuuU0VI/TVyaWHM euPpwU8/nYLFIcYDBCZa62kQWUYlUJ1b0H8kKm9RAT/00eYqVj16dl/yRioZ1dwv EP/1w+xKkxRhbYRYNPyelagL3mwI7PwGyUosNjoHGf1BWECUC30JdcwuQr2dG3JU iLbbm1Cew0XuhyZqThPs2FIbWnZs9gJ3+2okhO094vD6Y5dKQb8MYTezuIMTRjIl JIFamphNiD7hB89ONUOyZSUwLxrhZRA8a1sY9is7a5tKJk0ABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9/wIybewCTTWYze3jq/8j5eyndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZmMmVjZDgtNTdhNi0z YzE4LWJjMTMtNzcxMjU0MTFlNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6et3q5yVu+oSLvmsdmob0rm4bHtYqj2gPthe7HeYS+m9ttAIBGA8Z9 PZPw2RzqQxJFjnw8m+u1/rDHi/LjsD4Fw04gEeMX4uUQHkL6w5wudla0AU8esE1N ROhAb9Hzunj8WaOtu3lQAfjLtBFrvb4RED2yenZZRC3nTaMps3sw0MrPfFXO59OD /FVEQJ6GaLdNSYyT8vtzlOrvt+hpZnMiOD3M2858IuPbWJGEj5t3dKMDuYFHRSDs hgjPvEigVj+5bBk6AUKuxbo2iIHhkD7UQXh62cUhc36p12c18wlrkXyUOSJF8Lg7 TIIoLL8o1IeOXx1jz9kGMbSUy4Kq6Bg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:09 2025 by rpki-client